CVE 2013-1857: XSS Vulnerability in the `sanitize` helper of Ruby on Rails